$ rpki-client -vvf repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/35382e3134372e3138362e302f32342d3234203d3e203234353334.roa File: 35382e3134372e3138362e302f32342d3234203d3e203234353334.roa (raw, json) Hash identifier: fISgAshT6fdaWrWilwrStIis2PJ5deJBaM169sUzF34= Subject key identifier: B1:45:8B:36:BD:62:DC:2F:CA:C5:29:C9:F6:11:0D:7E:B8:B9:5B:1E Certificate issuer: /CN=DD29F5E4CE561760A0212F0448987AFBE75263D7 Certificate serial: 2B29A9B12B58DBEF46F4CBD6AFEA94C0354E1096 Authority key identifier: DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/35382e3134372e3138362e302f32342d3234203d3e203234353334.roa Signing time: Sat 19 Aug 2023 11:00:00 +0000 ROA not before: Sat 19 Aug 2023 10:55:00 +0000 ROA not after: Sat 17 Aug 2024 11:00:00 +0000 asID: 24534 IP address blocks: 58.147.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.crl rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 23:09:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:29:a9:b1:2b:58:db:ef:46:f4:cb:d6:af:ea:94:c0:35:4e:10:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD29F5E4CE561760A0212F0448987AFBE75263D7 Validity Not Before: Aug 19 10:55:00 2023 GMT Not After : Aug 17 11:00:00 2024 GMT Subject: CN=B1458B36BD62DC2FCAC529C9F6110D7EB8B95B1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:dc:49:d6:cc:a2:5f:14:54:ca:67:62:d2:1a: 56:e2:bc:5f:b0:d6:29:7e:0c:dd:2c:d5:3e:19:65: 67:38:de:50:3b:b4:c7:95:60:a1:b1:dd:eb:05:d6: 8e:ef:26:f5:27:40:cc:f0:f1:65:08:03:f2:1b:11: 8d:5f:a0:08:35:a5:26:62:cc:7e:da:e8:ee:37:09: f9:13:10:c9:1a:7b:23:a4:c2:98:e1:63:18:23:46: aa:ba:07:00:52:c3:bd:77:20:d9:2b:e7:fb:13:74: df:58:ba:fd:66:28:85:7a:31:6b:c0:e6:11:93:e7: c7:4e:5c:6c:08:a9:e4:4b:35:84:65:da:35:bd:d2: 6d:6f:d4:41:a6:1c:10:4d:9d:fb:0b:6b:c1:45:a4: 74:78:1a:12:bf:0c:0b:61:c1:f9:9d:49:3b:63:17: 93:87:b5:13:e3:5a:b6:3d:70:5d:df:fc:4f:fe:1c: aa:fc:27:64:ea:8b:a9:ad:89:c2:c2:4d:81:a5:aa: 55:06:f6:b2:1f:ef:0a:44:0b:81:d3:ad:02:50:ba: 1b:cf:f4:7d:51:b1:61:22:ca:a2:e3:b8:8d:20:3c: bf:b8:13:0c:7c:7f:10:8d:ee:de:31:48:da:1e:ca: 15:1a:50:97:b8:24:63:11:fd:f2:86:d3:70:ba:52: f6:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:45:8B:36:BD:62:DC:2F:CA:C5:29:C9:F6:11:0D:7E:B8:B9:5B:1E X509v3 Authority Key Identifier: keyid:DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/35382e3134372e3138362e302f32342d3234203d3e203234353334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 58.147.186.0/24 Signature Algorithm: sha256WithRSAEncryption 44:2b:04:b6:fc:79:0c:92:58:bf:f2:09:47:e7:18:fd:6c:fb: b6:86:32:37:1e:39:59:24:ad:4d:a9:01:ab:68:80:47:e2:be: 90:e4:fd:7e:b4:2e:05:7d:b7:32:89:43:63:e1:ab:1b:5c:97: 37:94:7a:e8:ab:1f:dc:b4:2f:c0:0d:21:4c:32:61:1f:86:6c: 79:9e:a6:12:a8:7d:a6:d1:60:4f:f9:3e:76:39:66:80:dc:64: 08:37:e4:7d:ed:be:d7:fb:7d:da:fd:ee:9a:51:a6:4f:90:13: 8a:02:49:42:ae:78:7c:38:1c:23:0d:94:54:cd:57:58:85:f1: 2e:30:0c:bd:ac:a8:55:1a:27:3b:b5:02:1a:24:97:17:e2:2d: 0a:cb:ad:8b:79:93:03:87:8b:4f:a4:9a:14:a9:02:a9:3c:fc: 20:8d:3c:cd:f7:f2:09:c9:e6:b8:de:bd:f7:2e:be:19:93:1c: 20:6c:e9:01:ba:42:a7:21:5f:81:a6:c5:26:6c:6e:29:a0:28: 52:25:44:42:29:d0:bd:44:f4:d5:b9:b0:57:cb:3c:f8:70:b2: 14:47:1c:8c:fb:31:cd:5b:31:05:b8:48:5c:76:7e:3a:b2:df: f0:b9:65:d4:4d:85:c4:e5:72:33:ee:26:af:76:f5:31:4f:0d: 93:e7:0a:6e -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUKympsStY2+9G9MvWr+qUwDVOEJYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQyOUY1RTRDRTU2MTc2MEEwMjEyRjA0NDg5ODdBRkJF NzUyNjNENzAeFw0yMzA4MTkxMDU1MDBaFw0yNDA4MTcxMTAwMDBaMDMxMTAvBgNV BAMTKEIxNDU4QjM2QkQ2MkRDMkZDQUM1MjlDOUY2MTEwRDdFQjhCOTVCMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi3EnWzKJfFFTKZ2LSGlbivF+w 1il+DN0s1T4ZZWc43lA7tMeVYKGx3esF1o7vJvUnQMzw8WUIA/IbEY1foAg1pSZi zH7a6O43CfkTEMkaeyOkwpjhYxgjRqq6BwBSw713INkr5/sTdN9Yuv1mKIV6MWvA 5hGT58dOXGwIqeRLNYRl2jW90m1v1EGmHBBNnfsLa8FFpHR4GhK/DAthwfmdSTtj F5OHtRPjWrY9cF3f/E/+HKr8J2Tqi6mticLCTYGlqlUG9rIf7wpEC4HTrQJQuhvP 9H1RsWEiyqLjuI0gPL+4Ewx8fxCN7t4xSNoeyhUaUJe4JGMR/fKG03C6UvbnAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUsUWLNr1i3C/KxSnJ9hENfri5Wx4wHwYDVR0j BBgwFoAU3Sn15M5WF2CgIS8ESJh6++dSY9cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjI0MDUyZS0yMjA1LTQ4ZjMtYTNjYi1jZThiMzI2YjhmNzEvMC9ERDI5RjVFNENF NTYxNzYwQTAyMTJGMDQ0ODk4N0FGQkU3NTI2M0Q3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQyOUY1RTRDRTU2MTc2MEEwMjEyRjA0NDg5ODdBRkJFNzUy NjNENy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA2MjQwNTJlLTIyMDUtNDhmMy1h M2NiLWNlOGIzMjZiOGY3MS8wLzM1MzgyZTMxMzQzNzJlMzEzODM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzNDM1MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADqTujANBgkqhkiG 9w0BAQsFAAOCAQEARCsEtvx5DJJYv/IJR+cY/Wz7toYyNx45WSStTakBq2iAR+K+ kOT9frQuBX23MolDY+GrG1yXN5R66Ksf3LQvwA0hTDJhH4ZseZ6mEqh9ptFgT/k+ djlmgNxkCDfkfe2+1/t92v3umlGmT5ATigJJQq54fDgcIw2UVM1XWIXxLjAMvayo VRonO7UCGiSXF+ItCsuti3mTA4eLT6SaFKkCqTz8II08zffyCcnmuN699y6+GZMc IGzpAbpCpyFfgabFJmxuKaAoUiVEQinQvUT01bmwV8s8+HCyFEccjPsxzVsxBbhI XHZ+OrLf8Lll1E2FxOVyM+4mr3b1MU8Nk+cKbg== -----END CERTIFICATE-----Generated at Sat Jun 1 00:11:40 2024 by rpki-client on console-ams.rpki-client.org